Thanks - I will take a look at that tomorrow. In the meantime, I was able to test with an iPhone (an old one... the iPhone3) and oddly enough, it worked. -And yet Androids still won't work unless you select 'accept any ssl' which certainly isn't a secure move. ----- Original Message ----- From: John Hardin <jhardin@xxxxxxxxxx> To: Who Me <whome9988@xxxxxxxxx> Cc: "squid-users@xxxxxxxxxxxxxxx" <squid-users@xxxxxxxxxxxxxxx> Sent: Thursday, January 26, 2012 5:16 PM Subject: Re: Reverse Proxy for OWA - issue with SSL and ActiveSync On Thu, 26 Jan 2012, Who Me wrote: > I suspect that I have either mis-configured exporting my SSL cert from my Exchange 2010 server, mis-configured something when extracting the pem for use in squid or fat-fingered my squid config some how. Yet - the thing that is making me crazy is that all of this works for OWA. So if I did any of the above, why would OWA work and not Active Sync? Something you might consider just as a troubleshooting tool is using stunnel + your cert to set up a SSL server on a different port redirecting to Squid's non-SSL listening port. Comparing results might give you some clue where the problem lies. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin@xxxxxxxxxx FALaholic #11174 pgpk -a jhardin@xxxxxxxxxx key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Vista: because the audio experience is *far* more important than network throughput. ----------------------------------------------------------------------- Tomorrow: Wolfgang Amadeus Mozart's 256th Birthday